Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

Jak se o tom psalo 2

1. 11. 11. 2026 · zachyceno 04:00 · NCSC-FI FI

   VSA-2026-062: Empty-object login token

   Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: None, CVEs: , Summary: A vulnerability was discovered in Xen Orchestra that is part of the Xen Orchestra Appliance. We classify the impact as Critical. For details on how we assign severity levels, see our Severity Levels Explained page. This vulnerability is actively exploited by a threat actor operating intially from 91.211.251.112:8001 and ustar3rqxgnskzgnwkgpofgtvxevm6cx3lxdbwt4mndtveqyaohid.onion:3333 (via…

2. 10. 11. 2026 17:17 · BleepingComputer US nadpis události

   Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

   A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [...]